Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VcKF6RxfMyBW9FUqSHP8wKWMmms.roa
File: VcKF6RxfMyBW9FUqSHP8wKWMmms.roa (raw, json)
Hash identifier: 2P098t5GWyJC83HgKCKb79G300kDG9pP8nwAvjxBBsY=
Subject key identifier: 55:C2:85:E9:1C:5F:33:20:56:F4:55:2A:48:73:FC:C0:A5:8C:9A:6B
Certificate issuer: /CN=5588f197f97e8900755544e810cddef9d90fbc41
Certificate serial: 018AD0ACE8B25717D24A8902FFA1C9907CD7
Authority key identifier: 55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VcKF6RxfMyBW9FUqSHP8wKWMmms.roa
Signing time: Tue 26 Sep 2023 08:48:27 +0000
ROA not before: Tue 26 Sep 2023 08:48:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62240
IP address blocks: 149.126.246.0/24 maxlen: 24
149.126.192.0/24 maxlen: 24
149.126.196.0/24 maxlen: 24
149.126.198.0/24 maxlen: 24
149.126.195.0/24 maxlen: 24
149.126.193.0/24 maxlen: 24
149.126.197.0/24 maxlen: 24
149.126.202.0/24 maxlen: 24
149.126.200.0/24 maxlen: 24
149.126.206.0/24 maxlen: 24
149.126.204.0/24 maxlen: 24
149.126.201.0/24 maxlen: 24
149.126.205.0/24 maxlen: 24
149.126.210.0/24 maxlen: 24
149.126.208.0/24 maxlen: 24
149.126.207.0/24 maxlen: 24
149.126.214.0/24 maxlen: 24
149.126.215.0/24 maxlen: 24
149.126.224.0/24 maxlen: 24
149.126.225.0/24 maxlen: 24
46.3.150.0/24 maxlen: 24
46.3.148.0/24 maxlen: 24
46.3.148.0/22 maxlen: 22
46.3.151.0/24 maxlen: 24
46.3.149.0/24 maxlen: 24
46.3.95.0/24 maxlen: 24
46.3.93.0/24 maxlen: 24
46.3.92.0/22 maxlen: 22
46.3.94.0/24 maxlen: 24
46.3.92.0/24 maxlen: 24
46.3.204.0/24 maxlen: 24
46.3.203.0/24 maxlen: 24
46.3.224.0/22 maxlen: 22
46.3.226.0/24 maxlen: 24
46.3.224.0/24 maxlen: 24
46.3.225.0/24 maxlen: 24
46.3.227.0/24 maxlen: 24
46.3.39.0/24 maxlen: 24
46.3.64.0/24 maxlen: 24
46.3.64.0/22 maxlen: 22
46.232.84.0/24 maxlen: 24
46.3.69.0/24 maxlen: 24
46.232.82.0/24 maxlen: 24
46.232.81.0/24 maxlen: 24
46.232.83.0/24 maxlen: 24
46.3.71.0/24 maxlen: 24
46.3.67.0/24 maxlen: 24
46.232.80.0/24 maxlen: 24
46.3.65.0/24 maxlen: 24
46.232.85.0/24 maxlen: 24
46.3.66.0/24 maxlen: 24
46.3.68.0/24 maxlen: 24
46.3.68.0/22 maxlen: 22
46.232.80.0/20 maxlen: 20
46.3.70.0/24 maxlen: 24
46.232.90.0/24 maxlen: 24
46.3.73.0/24 maxlen: 24
46.232.86.0/24 maxlen: 24
46.3.75.0/24 maxlen: 24
46.232.88.0/24 maxlen: 24
46.232.89.0/24 maxlen: 24
46.3.74.0/24 maxlen: 24
46.3.76.0/24 maxlen: 24
46.232.87.0/24 maxlen: 24
46.3.72.0/24 maxlen: 24
46.3.72.0/21 maxlen: 21
46.232.91.0/24 maxlen: 24
46.232.94.0/24 maxlen: 24
46.232.92.0/24 maxlen: 24
46.232.95.0/24 maxlen: 24
46.232.93.0/24 maxlen: 24
46.3.86.0/23 maxlen: 23
46.3.4.0/22 maxlen: 22
46.3.4.0/24 maxlen: 24
46.3.6.0/24 maxlen: 24
46.232.24.0/21 maxlen: 21
46.3.7.0/24 maxlen: 24
46.3.5.0/24 maxlen: 24
46.232.31.0/24 maxlen: 24
46.3.16.0/22 maxlen: 22
46.232.27.0/24 maxlen: 24
46.3.16.0/24 maxlen: 24
46.232.29.0/24 maxlen: 24
46.232.28.0/24 maxlen: 24
46.232.26.0/24 maxlen: 24
46.3.17.0/24 maxlen: 24
46.232.30.0/24 maxlen: 24
46.3.24.0/22 maxlen: 22
46.3.18.0/24 maxlen: 24
46.3.24.0/24 maxlen: 24
46.232.32.0/20 maxlen: 24
46.3.19.0/24 maxlen: 24
46.3.26.0/24 maxlen: 24
46.3.30.0/24 maxlen: 24
46.3.27.0/24 maxlen: 24
46.3.25.0/24 maxlen: 24
46.3.32.0/21 maxlen: 21
46.3.35.0/24 maxlen: 24
46.3.33.0/24 maxlen: 24
46.3.37.0/24 maxlen: 24
46.3.32.0/24 maxlen: 24
46.3.36.0/24 maxlen: 24
46.3.34.0/24 maxlen: 24
46.3.38.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:d0:ac:e8:b2:57:17:d2:4a:89:02:ff:a1:c9:90:7c:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5588f197f97e8900755544e810cddef9d90fbc41
Validity
Not Before: Sep 26 08:48:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=55c285e91c5f332056f4552a4873fcc0a58c9a6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:5f:34:4c:b2:f1:b2:6a:62:7a:1f:ad:9a:9f:
ee:b3:52:d3:d1:39:87:55:e1:01:0a:33:b3:9a:76:
92:8e:59:02:f8:4c:4e:1b:97:b6:66:7a:54:ea:e5:
91:09:08:c5:86:9d:a8:4f:04:73:c8:81:e1:17:fa:
0f:b0:ae:5f:1d:93:7c:9e:77:ab:1b:81:50:51:5d:
f6:54:1d:45:03:c6:34:e4:91:97:f1:42:6c:d7:e5:
bb:6c:8b:fc:38:71:5c:3b:70:2e:a5:50:f5:aa:59:
5d:4f:d7:57:67:cc:82:db:11:76:b8:26:b3:8c:e2:
c0:6c:42:ea:3f:af:20:26:17:37:e7:ba:02:b8:50:
4e:86:e5:1f:50:7d:5f:b6:72:db:7c:9d:77:79:8e:
f4:60:1b:f8:38:9b:77:7a:2c:0b:fe:5d:f6:6c:e2:
6d:9c:c5:f3:29:ff:7a:23:ea:9c:41:74:f1:b5:22:
33:23:a9:1b:9d:1e:ef:11:96:ba:6d:47:f0:6d:17:
b7:a7:a2:4d:2a:a4:df:0b:26:57:5b:7e:79:58:8d:
ef:95:35:8e:42:48:ec:fd:d6:ed:ab:9e:c5:86:81:
72:38:12:69:b4:9d:fc:55:0a:22:04:14:24:8b:8a:
39:89:df:15:c3:9d:eb:b1:c4:a9:32:64:c2:00:ab:
d0:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:C2:85:E9:1C:5F:33:20:56:F4:55:2A:48:73:FC:C0:A5:8C:9A:6B
X509v3 Authority Key Identifier:
keyid:55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VcKF6RxfMyBW9FUqSHP8wKWMmms.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.3.4.0/22
46.3.16.0/22
46.3.24.0/22
46.3.30.0/24
46.3.32.0/21
46.3.64.0/20
46.3.86.0/23
46.3.92.0/22
46.3.148.0/22
46.3.203.0-46.3.204.255
46.3.224.0/22
46.232.24.0-46.232.47.255
46.232.80.0/20
149.126.192.0/23
149.126.195.0-149.126.198.255
149.126.200.0-149.126.202.255
149.126.204.0-149.126.208.255
149.126.210.0/24
149.126.214.0/23
149.126.224.0/23
149.126.246.0/24
Signature Algorithm: sha256WithRSAEncryption
31:e8:cb:84:e4:1f:63:02:f7:8b:5a:50:8c:53:60:63:46:2f:
12:e8:39:e8:52:95:b4:81:7c:b8:04:07:a0:71:2b:d4:4e:23:
5d:db:ae:2b:fe:70:e0:77:10:5b:19:c4:34:7b:56:0d:4f:4a:
26:c6:67:fa:42:72:69:b9:0c:34:54:e0:fe:51:25:8d:da:f3:
40:6f:9b:6b:d0:62:5f:90:af:b3:a3:eb:57:52:be:c0:03:fc:
ce:ad:9c:e4:18:a5:90:b8:d1:bb:03:75:f6:3c:f0:5e:7b:99:
0b:b4:5f:25:82:3e:98:4a:d6:aa:7b:8c:4b:3f:2e:c5:a9:d9:
eb:bf:ea:76:78:0b:b8:c7:4d:f8:55:54:97:ee:93:b4:99:c7:
24:59:c5:21:33:f7:b9:b5:a2:73:c6:66:e3:28:7a:b9:38:b3:
b3:8a:ae:f4:d9:f2:e0:80:ea:d0:fc:d2:c8:93:11:73:a6:4c:
29:5c:be:44:df:00:96:3d:ea:9d:cb:f3:3d:e5:5a:35:44:6a:
00:39:22:25:fe:d1:d6:87:1c:36:f6:08:6d:fc:d8:51:4e:83:
b5:8a:56:f1:fe:6a:1e:ea:a3:a6:22:ee:23:ce:fe:eb:da:f3:
6f:43:51:67:46:8f:e3:fb:da:e6:4b:69:cb:66:96:53:f0:76:
f7:6c:51:18
-----BEGIN CERTIFICATE-----
MIIFojCCBIqgAwIBAgISAYrQrOiyVxfSSokC/6HJkHzXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU1ODhmMTk3Zjk3ZTg5MDA3NTU1NDRlODEwY2RkZWY5ZDkw
ZmJjNDEwHhcNMjMwOTI2MDg0ODI3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NWMyODVlOTFjNWYzMzIwNTZmNDU1MmE0ODczZmNjMGE1OGM5YTZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxV80TLLxsmpieh+tmp/us1LT0TmH
VeEBCjOzmnaSjlkC+ExOG5e2ZnpU6uWRCQjFhp2oTwRzyIHhF/oPsK5fHZN8nner
G4FQUV32VB1FA8Y05JGX8UJs1+W7bIv8OHFcO3AupVD1qlldT9dXZ8yC2xF2uCaz
jOLAbELqP68gJhc357oCuFBOhuUfUH1ftnLbfJ13eY70YBv4OJt3eiwL/l32bOJt
nMXzKf96I+qcQXTxtSIzI6kbnR7vEZa6bUfwbRe3p6JNKqTfCyZXW355WI3vlTWO
Qkjs/dbtq57FhoFyOBJptJ38VQoiBBQki4o5id8Vw53rscSpMmTCAKvQ4wIDAQAB
o4ICrjCCAqowHQYDVR0OBBYEFFXChekcXzMgVvRVKkhz/MCljJprMB8GA1UdIwQY
MBaAFFWI8Zf5fokAdVVE6BDN3vnZD7xBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVllqeGxfbC1pUUIxVlVUb0VNM2UtZGtQdkVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi82MjI5ODEtOTY1MC00MjcxLTkyY2Et
N2NmZWY0Mjc2YTBmLzEvVmNLRjZSeGZNeUJXOUZVcVNIUDh3S1dNbW1zLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi82MjI5ODEtOTY1MC00MjcxLTkyY2EtN2NmZWY0Mjc2YTBm
LzEvVllqeGxfbC1pUUIxVlVUb0VNM2UtZGtQdkVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIHDBggrBgEFBQcBBwEB/wSBszCBsDCBrQQCAAEwgaYDBAIu
AwQDBAIuAxADBAIuAxgDBAAuAx4DBAMuAyADBAQuA0ADBAEuA1YDBAIuA1wDBAIu
A5QwDAMEAC4DywMEAC4DzAMEAi4D4DAMAwQDLugYAwQELuggAwQELuhQAwQBlX7A
MAwDBACVfsMDBACVfsYwDAMEA5V+yAMEAJV+yjAMAwQClX7MAwQAlX7QAwQAlX7S
AwQBlX7WAwQBlX7gAwQAlX72MA0GCSqGSIb3DQEBCwUAA4IBAQAx6MuE5B9jAveL
WlCMU2BjRi8S6DnoUpW0gXy4BAegcSvUTiNd264r/nDgdxBbGcQ0e1YNT0omxmf6
QnJpuQw0VOD+USWN2vNAb5tr0GJfkK+zo+tXUr7AA/zOrZzkGKWQuNG7A3X2PPBe
e5kLtF8lgj6YStaqe4xLPy7Fqdnrv+p2eAu4x034VVSX7pO0mcckWcUhM/e5taJz
xmbjKHq5OLOziq702fLggOrQ/NLIkxFzpkwpXL5E3wCWPeqdy/M95Vo1RGoAOSIl
/tHWhxw29ght/NhRToO1ilbx/moe6qOmIu4jzv7r2vNvQ1FnRo/j+9rmS2nLZpZT
8Hb3bFEY
-----END CERTIFICATE-----
Generated at Tue Sep 26 16:07:45 2023 by rpki-client on console-fra.rpki-client.org